๐ง๐ท
Peregrine
2026-09-17 03:14:43
(23 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "G ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /static../.env HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-15 03:13:55
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "G ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /static../.env HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
chronos
2026-09-14 06:53:18
(3 days ago)
[AUTORAVALT][[14/09/2026 - 03:53:18 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125. ...
show more
[AUTORAVALT][[14/09/2026 - 03:53:18 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125.34.bc.googleusercontent.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
๐บ๐ธ
chronos
2026-09-14 06:19:41
(3 days ago)
[AUTORAVALT][[14/09/2026 - 03:19:41 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125. ...
show more
[AUTORAVALT][[14/09/2026 - 03:19:41 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125.34.bc.googleusercontent.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
๐ง๐ท
Peregrine
2026-09-14 03:11:49
(3 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /s ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /static../etc/passwd HTTP/1.1" 404 18193
- 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 404 18193
- 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /media../etc/passwd HTTP/1.1" 404 18193
- 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 404 18193
- 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /files../etc/passwd HTTP/1.1" 404 18193
show less
Bad Web Bot
Web App Attack
๐จ๐ฑ
ovallevelasquezanibal
2026-09-13 12:00:14
(4 days ago)
Detectado por Wazuh SIEM en api-ux.com | Alertas: 35 | Nivel max: 10 | Agentes: web-apiux-2025 | Com ...
show more
Detectado por Wazuh SIEM en api-ux.com | Alertas: 35 | Nivel max: 10 | Agentes: web-apiux-2025 | Common web attack.; Web server 400 error code.; Multiple web server 400 error codes from same source ip.
show less
Web App Attack
๐ณ๐ฑ
larse99
2026-09-13 09:00:36
(4 days ago)
Detected Scanning / Hacking activity
Port Scan
Hacking
๐ฉ๐ช
EGP Abuse Dept
2026-09-13 08:38:51
(4 days ago)
Scanning for web/db/file exploits on www.outdoorlivingexclusive.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-09-13 07:36:54
(4 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "G ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: - 34.125.101.40 - - [13/Sep/2026:04:36:43 -0300] "GET /static../.env HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
chronos
2026-09-13 07:30:06
(4 days ago)
[AUTORAVALT][[13/09/2026 - 04:30:04 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125. ...
show more
[AUTORAVALT][[13/09/2026 - 04:30:04 -03:00 UTC]
Attack from [Google LLC]
[34.125.101.40][40.101.125.34.bc.googleusercontent.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
๐ฆ๐น
Starburst SysOp Team
2026-09-13 04:56:21
(4 days ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-vie6-1)
Hacking
Bad Web Bot
๐บ๐ธ
RAP
2026-09-13 04:07:56
(4 days ago)
2026-09-13 04:07:56 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan
Web App Attack
๐บ๐ธ
zcampbell
2026-09-13 02:17:01
(5 days ago)
Web vulnerability scanning: probing for exposed sensitive files (.env). Detected and blocked automat ...
show more
Web vulnerability scanning: probing for exposed sensitive files (.env). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
๐ณ๐ฟ
Antinson
2026-09-13 02:05:26
(5 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐ฏ๐ต
VXG-NET
2026-09-12 19:40:06
(5 days ago)
port=80, indicator_type=info-leak
Hacking